DISTRIBUTION OF ELEMENTS OF COSETS OF 
SMALL SUBGROUPS AND APPLICATIONS 



JEAN BOURGAIN, SERGEI KONYAGIN, AND IGOR SHPARLINSKI 

Abstract. We obtain a series of estimates on the number of small 
integers and small order Farey fractions which belong to a given 
coset of a subgroup of order t of the group of units of the residue 
ring modulo a prime p, in the case when t is small compared to 
p. We give two applications of these results: to the simultaneous 
distribution of two high degree monomials x''^ and x''^ modulo p 
and to a question of J. Holden and P. Moree on fixed points of the 
discrete logarithm. 



1. Introduction 

1.1. Estimates for the number of elements of small height in 
a coset of a small subgroup. We fix a prime number p > 2. By ¥p 
we denote the field of residues modulo p. For any element a; e Fp we 
define its integer height 

= min{|a| : a E Z, a = x (mod p)} 

and its rational height 

= min{max(|a|, 6) : a G Z, 6 G N, a = 6a; (mod p)}. 

Note that by pigeonhole principle, 

\x\ < p/2, \\x\\ < a/p. 

Moreover, if < \/p/2 then the numbers a G Z, 6 G N with \a\ < 
< \\x\\, a = bx (mod p) are uniquely defined. Also, the rational 
height is defined for a rational number X as 

||x|| = min{max(|a|, 6) : a G Z, 6 G N, x = a/6}. 



As usual, we use F* = Fp \ {0} to denote the multiplicative group of 



Fp. 
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U t \ p — 1 then there is a unique multiphcative subgroup G C W*. 
For a G Fp we denote 

aG = {ag : g G G}. 
Our aim is to estimate the cardinahty of the sets 

U{k,t,a) = {x : xEaG,\x\<k}, 

V{k,t,a) = {x : x E aG, \\x\\ < k}. 

These quantities are important for estimates of exponential sums in 
¥p and for analysis of distribution of cosets of G in Fp. Estimates for 
#f/ {k, t, a) and for jj^V{k, t, a) have been obtained in [T7] and [S] where 
the case of "large" t and k, that is, for log/c x logt x logp (where 
A ^ B means that A = 0{B) and B = 0(^4)) has been studied. In 
this paper our main interest is related to the case of small G (logt = 
o(logp); in particular, logt x log log p). It is proved in |3J that in 
a very general situation with rather small t and rather large k we 
have ^U{k,t,a) = o{t). For smaller k (say, k < p^'^) the problem is 
easier. In this paper we prove some explicit estimates of ^U{k, t, a) 
and for ^V{k, t, a) for such k and small G and apply these results to 
the problem of simultaneous distribution of two powers in Fp (see [T]). 
If both parameters t and k are very small we establish some upper 
bounds for ^U{k,t,a) and for ^V{k,t,a), usually much better than 
the trivial estimates 

#f/(A;, t, a) < min{2fc, t} and Wik, t, a) < min{2fc^ t}. 

These results are applied to estimation of fixed points of the discrete 
logarithms. 

We also noted that in the case when k and t are of about the same 
size one can estimate i^U{k, t, a) by using the results and techniques 
of [7j, based on [H Theorem 1.1] that gives an explicit version of the 
sum-product theorem and of [S] which is based on estimates of [H] on 
the number of divisors in a short interval of an integer n 

To formulate our results, we need some notation. 

Let x,y > 0. A positive integer n is called y-smooth if it is composed 
of prime numbers up to y. The \E'(x,?/) function is defined as the 
number of ^/-smooth positive integers that are up to x. 

As usual, we use (a, b) to denote the greatest common divisor of 
integers a and b (with + 6^ > 0). 

Finally, we also use pk to denote the kth prime. 
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We fix a prime number p > 2. For any positive integer 1 < k < p/2 
we define the quantity 

log(p/2) 



ro(fc) 



log k 



Furthermore, let t G N be another parameter, then we define 

'ro{k) + 



1.2) 



so(fc, t) = max < s 



< t 



We observe that ro(fc) decreases and so{k,t) increases as k and t 
increase. 

Theorem 1. For any a G F* we have 

: X eU{k,t,a)} <^{k,ps+i) 

where s = so{k, t). 

Theorem 2. Let a G F* and Xq G U{k, t, a) 

: X G f/(A;,t,a), (x, Xq) = 1} < ^{k,Ps) 

where s = so{k, t). 

If the coset is G itself then we can take Xq = 1. Thus, we have the 
following estimate for the number of small elements in a subgroup. 

Corollary 3. We have 

: x G f/(A;, t, 1)} < ^(fc,p,) 

where s = so{k, t). 

Remark 1. If we are interested in counting the number of x such that 
X G U{k,t,a) and 1 < x < k then sometimes it is possible to estimate 
this number slightly better than in Theorem [T]by replacing ro(/c) in the 
definition of so{k,t) with 

logp 



ro{k) 



log k 



A similar improvement can be made for Theorem [2] as well. 

To study elements of small rational height in cosets of subgroups, we 
also define 

If ^i(^) > 1 (that is, k < (p/2)^/^) we also define 



Si{k, t) = max < s : 



ri{k) + s 
s 



< t 
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Next, we denote for s G N 

Also, we consider that ^{k, 0) = 1. 
Theorem 4. For any a e¥* we have 

#{|a;| : x e V{k,t, a)} < ^{k, s + 1) 
where s = si(/c, t). 
Theorem 5. We have 

: X e V{k,t,l)} < l>(/e,s) 

where s = si{k, t). 

Theorems [THS] can be useful only for very small k. For example, if 
k ^ with a fixed 6 > then the estimates given by these theo- 
rems are trivial. However, using ideas of their proofs we can estimate 
i^V{k, t, a) non-trivially for very small subgroups G and and not too 
small k. In particular, if 5 G (0,1/10) is fixed and k p^ then the 
following theorem is nontrivial for a certain range of t. Denote 

log(p/2) 1 

r2{k) = — — - - . 

\_ SlogK 4 

Theorem 6. Let s G N. For any a we have 



s 



r + s 



where r = r2{k). 

We also have: 
Theorem 7. Let s G N. We have 

t, 1) < max ^2<I(A:, s - 1) 
where r = r2{k). 

We do not prove analogs of Theorem [6] and [7] for integer heights. 
However, notice that some estimates for #f/ {k, t, a) can be deduced 
using the trivial inequality ^U{k,t,a) < i^V{k,t,a). 
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1.2. On solutions of systems of congruences. A general problem 
is to estimate , for given r, a^, ki, U {i = l,...,r), the number of 
solutions of a system of congruences 

(1.3) ttix''^ = k + yi (mod p) 
in the box 

r 

(1.4) (x,i/i,...,i/,)eF/x J][l,iV,]. 

1=1 

For integers l<ki<...<kr<p — 1 which satisfy the conditions 

(1.5) {ki,p- 1) < p^-', l<i<r, 
and 

(1.6) {ki - kj,p- 1) < j9^"", l<j<i<r, 

J. Bourgain f2] has established the following result. 

Lemma 8. Given r G N and e > 0, there is 6 > depending only on 
r and e, such that for a sufficiently large prime p and 1 < ki < . . . < 
kr < p — I satisfying (\l.5\i and (11. 6p . for (ai, . . . , a^.) G Fp*" \ {0} the 
bound holds 



max 

{ai,...,ar)&p'-\{0} 



exp f — [aix''^ + . . . + ttrx''"') j 



Remark 2. The condition ( ll.6p is essential, as for instance the example 

X — x*^^^^^/^ shows. 

Using standard arguments, one can deduce from Lemma [8] the fol- 
lowing. 

Corollary 9. Given r G N ande > 0, there are S > andC , depending 
only on r and e, with the following property. If p > C is a prime and 
1 < ki < . . . < kr < p — 1 satisfy (II. 5p and (11.61) then for (ai, . . . , a^) G 
F/ \ {0}, li,...,lr e Fp, and Ni,...,Nr G Ni,...,Nr < p, the 
number N of solutions of the system of congruences (II. 3p satisfies the 
inequalities 

\N - Ni - --Nr/p'-^l <p^~^. 
In particular, we have nontrivial solutions if 

In [H Theorem 17] the existence of solutions is proved under weaker 
restrictions on differences ki — kj, namely 

{k,-k„p-l) <^ (l<j<z<r) 
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instead of f ll.6p . where B depends only on r and e, which however are 
not enough for getting an upper estimate on the number of solutions 
of the same order Ni - ■ ■ N,f./p'^~^. 

Furthermore, the estimates for the number of solutions of two con- 
gruences are given in [U Theorem 19] in a more precise form under the 
conditions 

(1.7) (A;„p-1) <pi-^ (^ = 1,2) and [k^-k^^p-l) <^^. 
More precisely, for 

(1.8) ai,a2eF;, h,h^^p, N^.N^en, 
we define 

'xe¥* : 3(ni,n2) G [l,iVi] x [l^N^], 



ajX^^ = Ij + rij (mod p) (j = 1, 2) 

Then by [1], Theorem 19], for every e > there is ?7 > 0, such that the 
following holds. If ki, k2 satisfy (11. 7p then for I < Ni, N2 < p and any 
6 G (0, T]) we have 

(1.9) ^I>(Ml. Cp^-s) (, _ (2ih-h,P-l)^ 5, 



P J \ \ p — 1 

where C > is an absolute constant. 

Remark 3. The estimate is nontrivial if 5 < 1/5 and N1N2 > Cp^'^ . 

Thus, the bound (II. 9p gives a nontrivial estimate for the number of 
solutions under very weak assumptions on ki — /c2. If {ki — k2,p — 1) is 
essentially smaller than p then we can get a better lower estimate. 

Theorem 10. There exists an absolute constant C > 0, and for every 
e > there is rj > 0, such that the following holds. // A G ki, k2, 
rj, satisfy (I1.7P as well as 

l<Ni,N2<p, A<p\ 

then 

[1.10) #/ > f - CpA-^^ (1 - t-^ max #y(A, t, a] 



where 



P J \ a€¥p* 

p — 1 



{ki -k2,p-iy 

Using Theorem [10] and Theorem [6] one can estimate the number of 
solutions of a system of two congruences from below. We give some 
related examples. 
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1.3. Fixed points of the discrete logarithms. We consider some 
exponential congruences which are related to studying fixed points of 
the discrete logarithms in finite fields, see [Gj [TOl [HI [151 [IHl For a 
prime p we denote by F{p) the number of solutions of the congruence 

(1.11) 9^" = }^ (modp), l< g,h<p-l, 

with arbitrary integers g and h. J. Holden and P. Moree [16] have 
conjectured that 

(1.12) F{p) = {1 + o{l))p. 

It has been shown in [5J that F{p) = p + 0(p^/^"^^) for a set of primes 
of relative density 1 . 

It is noted in [3 Bound (33)] that 

Fip)<ip-l)Tip-l), 

where T{n) is the number of divisors of n G N. Therefore 

'(log 2 + o(l)) logp' 



;i.l3) F{p)<pexp 



log log p 



We note that in f ll.l3p and everywhere else in the paper, the argument 
of iterated logarithms is always assumed to be large enough so that the 
function is well-defined. 

Towards the conjecture (]1.12p . here we prove the following upper 
estimate for F{p). 

Theorem 11. We have 

F{p) = 0{p). 

We remark that though obtaining an asymptotic formula for F{p) 
seems to be difficult, rather elementary arguments imply the lower 
bound 

(1.14) F(p) > j9 + 0(p=^/^+"«). 

It is likely that the arguments of [5j can be used to get a better remain- 
der term in (11.141) : we do not try to optimise it in this paper. 



1.4. Notation. We recall that U = 0{V), t/ < V and V > t/ are ah 
equivalent to the statement that the inequality \U\ < cV holds with 
some constant c > 0. Sometimes we write U = OxiV), U <t^\ V and 
V U to emphasise that the implied constant may depend on a 
certain parameter A. We also write U ^ V if U <t^V<tiU. 
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2. Distribution of Elements of Cosets of Small 

Subgroups 

2.1. Proof of Theorem [1]. Take a maximal possible set 

{xo,Xi,. . .,Xi} C Z 
of multiplicatively independent elements of U{k,t,a). We claim that 

(2.1) i<s. 
Indeed, let 

Y = {xq°x^^ . . . x"^ G Z : Mo, . . . , M£ > 0, Uq + . . . + Ue = r} 
where r = ro(A;). 

For any y E Y the exponents uo, ■ ■ ■ ,U£ are uniquely defined due to 
multiphcative independence of xo, ■ ■ ■ ,X£. Therefore, 

(2.2) *^={'Y)- 

Next, for any y E Y we have \y\ < < p/2. Thus, different elements 
of ?/ G Z are different as elements of ¥p as well. Finally, Y C a^+^G. 
Hence, ^Y < t. Comparing this inequality with f l2.2p and recalling the 
definition (O) of so{k,t) we get (CT . 

Take the largest possible n so that Pn k and define the matrix 

A _ \i<j<n 

of exponents in the prime number factoizations 

n 

By the choice of xq, ■ ■ ■ ,Xs, the matrix A is of full rank i + 1 and for 
any element 

n 

X = ±Y[p]' G U{k,t,a) 
i=i 

the vector (ai, . . . , a„) is a linear combination of rows of the matrix 
A with rational coefficients. We take a non-singular [i + 1) x {£ + 1) 
submatrix B of A. Let the columns of B correspond to prime numbers 
qi < ... < qe+i. 

For any x G U{k, t, a) we define b(x) = (/3i, . . . , /3^+i) by 

gf I X and gf +^ fx, 1 < j < ^ + 1. 
We denote the rows of B by 

bi = (A,i,...,A,^+i), 0<z<£. 
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So, 

Q _ (P. Y<j<i+i 

^ ~ \y^,3)o<i<e 

We see that bj = b(xj). 

We claim that different elements |x| with x G U{k,t,a) define differ- 
ent vectors b(x). Indeed, the vector b(x) determines rational numbers 
Uo, . . . ,ue so that 

h{x) = y^Mjbj. 

i=0 

Then 



|X| \Xi 
i=0 

is also uniquely determined by b(x). 

It suffices to estimate the number of possible vectors b(a;) with x G 
U{k,t,a). We note that 

i=i j=i 

We now see that different elements |x| with x G U{k,t,a) define differ- 
ent p£+i-smooth numbers, thus 

#f/(A;,t,a) < ^(A;,pm)- 
Using fl2.ll) completes the proof. 

2.2. Proof of Theorem [2]. Now we take a maximal possible set 

{xi, . . .,xe} CZ 

of multiplicatively independent elements of U{k,t,a) with {xo,Xj) = 1 
for j = !,...,£. The inequality (12. ip can be proved in a similar way. If 
y = Xq°Xi^ . . .x^" then the number \xo\^° is determined as the largest 
power of l^ol dividing y. The exponents ui, . . . ,U£ are uniquely defined 
due to multiplicative independence of Xi, . . . ,Xi and the equality 

The matrix 



^ — i'^ij)l<i<i 



is defined by the equahties 



The rest of the proof is the same as in Theorem [TJ 
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2.3. Proof of Theorem (4], Similarly to the proof of Theorem [T] we 
take a maximal possible set 

{xo,xi, ...,xe}eQ 

of multiplicatively independent elements of V{k, t, a). Now we have to 
verify that 

(2.3) i<s = si{k,t). 

To do so, we define 

Y = {xl'x'^' ...xf eQ : Uo,...,Ue>0,Uo + ... + Us = r} 

where r = ri{k). The proof of (12. 3p follows the proof of (12. ip . The 
distinction is that now for any y & Y we have \\y\\ < < a/p/2, and 
thus different rational values of y with this condition get reduced to 
different elements of ¥p. 

We also choose prime numbers qi < ... < qe+i as in the proof of 
Theorem [H Now we have to estimate the number of rational numbers 
of the form 

s+l 

m = JJgf e Q : ||m|| < k. 
i=i 

Denote 

J+ = {j : /3, > 0}, m+ = J] gf G N, 
J_ = {j : /3, < 0}, m_ = J] q/^ G N. 

So, m = m^/m^, m+ < k, m_ < k. For a fixed i = i^J+ there are {^^^) 
ways to select J+ C 1, ...,£ + 1. As 7+ and J_ have been chosen, there 
are at most \E'(A;,pj) possible values for and at most \Ef(fc,p^_j+i) 
possible values for m_. Combining these estimates we complete the 
proof 

2.4. Proof of Theorem m We follow the proof of Theorem HI Now we 
take a maximal possible set {xi, . . . , Xg} of multiplicatively independent 
elements of V{k,t,l) and define 

Y = . . . x"^ G Q : Ml, . . . , M£ > 0, Ui + . . . + M£ < r} . 

2.5. Proof of Theorems [6] and [T], We prove Theorems [6] and [7] si- 
multaneously. 

We take a maximal possible set {xi, . . . , x^} of multiplicatively inde- 
pendent elements of V{k,t, 1). We consider separately two cases. 
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Case of i < s. Assume that V{k, t,a) and fix i/q G V{k, t, a). Then 
for any y G V{k,t,a) we have y = xyo for some x G V{k'^,t, 1). By 
the arguments from the proof of Theorem [6] the number of elements 
X satisfying these conditions is at most 2$(fc^,£) < 2$(/c^,s — 1) as 
desired for Theorem El If a = 1 we take yo = 1 and we have x = y & 
V{k,t, 1). This gives the bound ^V{k,t, 1) < 2<I(A;, s - 1) as desired 
for Theorem [71 

Case of i > s. Take the largest possible n so that p„ < k. Define the 
matrix 



by equalities 



n 

\X, ' 



By the choice of Xi, . . . , x^, the matrix A has rank i and for any element 

n 

X = ijjpj^ G V{k,t,l) 
i=i 

the vector a(x) = (ai, . . . , an) is a rational linear combination of rows 
of the matrix A. Equivalently, the vector (ai, . . . , belongs to the 
linear subspace Y over Q generated by a(xj), j = 1, . . . ,i. We now as- 
sume that the elements chosen so that the parallelepiped 
!3^{xi, . . . , xi) with edges a(xj), j = 1, . . . , £ has a maximal volume. 
We claim that for any integer vector . . . , m^) 7^ we have 



(2.4) ||x|| > k^'^, a; = JJ 



Indeed, assume that (12. 4p does not hold. Without loss of generality, we 
can assume that 7^ 0. We consider a new system of multiplicatively 
independent elements of V{k,t^ 1) obtained by replacing a number xi 
in the system (xi, . . . , x^) by x^. Then the volume of l3^{x^ , X2, . . . , x^) 
is the volume of i3^(xi, . . . ,x^) multiplied by 2|mi| > 1. This does not 
agree with the choice of (xi, . . . , x^). So, (12. 4 p holds. 
Now we consider the set 

Y = I Wxf'y : UQ,...,Ui>Q, 
Vj=i 

Mo + ••• +M£ < r, y G V{k,t,l) ) C 
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where r = r2{k). Using (12. 4p and the inequahty ||?/i/?/2|| < k"^ for 
2/1) 2/2 £ y{k, t, 1), we deduce that different vectors {ui, . . . ,U£,y) define 
different elements of y. Therefore, 

(2.5) i^Y=(^'~^^^Wik,tA). 

Next, for any y G F we have \\y\\ < A;^''''^^ < \/p/2. Thus, different 
rational values of y with this condition get reduced to different elements 
of ¥p. Finally, Y C aG. Hence, < t. Comparing this inequality 
with (12. 5 p we get 

t> t,l) + #nfc,t,l). 

This completes the proof. 

3. Estimates for sets of smooth numbers 
We need several estimates for \E'(x,?/). 

If y is small, we use the following result, see [TSl Theorem 1.4]: 

Lemma 12. Uniformly for x > y > 2, we have 

1 1 



log^(x,?/) = Z [1 + 

where 



log y log log X 



logy V logxy logy V y 

In particular, we have, see [121 Equation (1.14)]: 

Corollary 13. For any a > 1 we have 

^(x, (logx)°) = {x oo). 

Moreover, for very small y the asymptotic formula for \E'(a;,?/) is 
known, see [131 Theorem 1.5]: 

Lemma 14. Uniformly for 2 < y < (logx)^/^, we have 

vi>(a;, y) = J—Y\}^(i + o( y- 1 1 . 

(y) ! A log pj V V (fog ^) fog y / / 

Therefore: 

Corollary 15. For any s G N and x > exp(p^) we have 

^(x,p,) < (logx)^ 



ELEMENTS OF COSETS OF SMALL SUBGROUPS 13 

For large y we know the following estimate for ?/), see [I3l Corol- 
lary 1.3]: 

Lemma 16. Let x > y > 2 and u = (log x) / log y. For any fixed e > 
we have 

as y and u tend to infinity, uniformly in the range y > (logx)^"'"'^. 

Moreover, in a smaller range an asymptotic formula for \E'(x,?/) is 
known, see [131 Theorem 1.1 and Corollary 2.3]. 

Lemma 17. Let x > y > 2 and u = (logo;) / log For any fixed e > 
we have 

'log(l + u)' 



= xp{u) (1 + 

uniformly in the range 



logy 

y > exp ((loglogx)^^/^)+^) , 



151 



where 

p{u) = exp(— M(logu + loglog(M + 2)) + 0(1)). 
is the Dickman function. 

4. On SOLUTIONS of systems of congruences 

4.1. Discrepancy and exponential sums. We recall the notion of 
discrepancy which for a sequence of H points 

(4-1) r = (71,^, . . . ,7m,x)f=i 

in the m-dimensional unit cube, is defined as 

TAB) 
H 

where Tr{B) is the number of points of the sequence F in the box 

fi= [«i,/3i) X ... X [«„,/?„) C [0,1)"^ 

of volume \B\ and the supremum is taken over all such boxes. 

A link between the discrepancy and exponential sums has been es- 
tablished independently by Koksma \IS\ and Sziisz [20], see also [TTl 
Theorem 1.21]. 

Lemma 18. For any integer L > 1 and sequence T of H points ( 14. ip 
the following bound holds 

11 m ^ H 



Ar = sup 

Bc[o,iy 



Ai,...A™ez j=i 

0<|Ai| + ...+|A„|<L 



J2 exp 27n J2 ^jlj,: 

x=l \ j=l 
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4.2. The proof of Theorem [IS Let 

d = {ki — k2,p — I) and t = {p—l)/d. 

If (ki — /c2,p — 1) < then the resuh fohows from CoroUaryini So 

we assume that 

d > p^-''\ 

Write X = y^z. For any 2; G F* we denote 

/, = G F; : y'z G /}. 

Then 

(4.2) #/ = ^ ^ #/^. 

p — 1 

Fix Since y^^^ = y^'^^ (mod p), the condition x I can be written 

as 

(4.3) ttjy^^^z''^ = Ij + rij (mod p), rij G [1, A^^], j = 1, 2. 
Now we denote 

Z = {ze¥p* : llaa^'^'-'^Vaill > A}. 

To get a lower estimate for we take a sum over only z ^ Z. 

First we estimate i^Z. The multiset {z''^~'^^} is the subgroup G of 
¥p* of order t, and each element of G has multiplicity d. Therefore, 

(4.4) #Z = {l-t-'\ViA,t,a2/a^)\) (p-l). 

Next, we estimate for z ^ Z. We note that the condition z ^ Z 
implies that 

AiOi + X^a^z^'^'^^ ^ (mod p) 
for < max(|Ai|, IA2I) < A. By Lemma [8] we have 



exp (y'^i^z'^HAiai + A2a2^'=^-^^)') 



<p'-' 



for some 5 > that depends only on e. Thus by Lemma [18], applied 
with m = 2 and L = A, we obtain 

= ^ + o {p/A+p'-' (log A)2) . 

We observe that for rj < 6/2 and A < p'' we have 

p^-^ (logA)' <p/A. 
Recalling (14.21) and the bound (14. 4p we complete the proof. 
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4.3. Applications of Theorem llOt some examples. We consider 
the cases when A^i, N2 are comparable to p. In our examples we use 
notation from the statement of Theorem [10] . 

Corollary 19. For any > 0, > there exists some B such that 
if 

Ni > A,p, N2 > A,p, t < 

log logp 

then 

N1N2 ( B 
#/ > 1 - - 

p V t 

Indeed, we assume that p is large enough. We take A = [(logp)^]. 
To estimate ^V{A,t,a) we apply Theorem [6] with s = 1. 

Corollary 20. For any I E N, Ai > 0, A2 > there exists some B 
such that if 

log log p 

then 



> !Mi (i _ BjiogiogpY 
~ P \ OogpY 



Indeed, we assume that p is large enough. We take A = [(logp)'^^]. 
To estimate ^V{A, t, a) we apply Theorem [6] with s = I observing that, 
due to Corollary [T5l we have s — 1) (loga;)''"^ for x > 2. 

If t is large one can use the following estimate. 

Corollary 21. For any r] e (0,1/2], e > 0, Ai > 0, A2 > there 
exists some B such that if t < p'^ and 

Ni > Aip, N2 > Aip 

then 

^jy.N^N2 / ^logp + t(^+-)/' 



p \ t 
where I = [1/(2?7)J . 

Proof. Again, we assume that p is large enough. We take A = [t/2] 
and denote 

^ = {{u/v) : u e Z, V e N, \u\ < A, V < A, 

3x G aG vx = u (mod p)}. 
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By the definition of V{A, t, a), we can associate witli any element x G 
V{A,t,a) a rational number u/v G ^ sucli tliat vx = u (modp). 
Tfius, 

(4.5) #^<#\/(A,t,a). 

Actually, the equality in (14.51) holds since A < \/p/2. 
Now consider the set 

= {ai . . . a; : ai . . . , ai e £/}. 

By O Corollary 3] we have 

(4.6) > 

where the implied constant in ^ depends on / and e. On the other 
hand, any element of ■e/*-'-' has the form u/f, u G Z, f G N, |m| < A', 
f < A'. Since A' < distinct element of i^/*^'^ are distinct as 

elements of ¥p as well. Considering j^/^''^ as a subset of ¥p we see that 
C a'G. Therefore, 

(4.7) < t. 
Inequahties fl^ . flT6|) and (g^D imply 

#V^(A,t,a) 

The corollary follows from this estimate and Theorem [TUl □ 

5. Fixed points of the discrete logarithms 

5.1. Preparations. For any divisor of p — 1 and k = {p — l)/d we 
define the sets 

X*{k,p) = {x : l<x<k, {x,k) = 1, x^ = {-kf (modp)}, 
X{k,p) = [x : I <x <k, x^ = {-kf (modp)}. 

Let 

T(rf,p) = #X*(fc,j9). 

It is known that 
(5.1) F{p)= J2dT{d,p), 

d\p-l 

see [16], Equation (5)]. 
Lemma 22. We have 

^T((p-l)//i,p)<#X(fc,p). 

h\k 
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Proof. For h \ k we define the set 

X{k,h,p) = ^X*{h,p). 

Clearly, 

(5.2) i^X{k,h,p) = #X*(/i,j9) = T{{p-l)/h,p). 

For X G X*{h,p) we have 

^)'= (^)'m'''- Q)'(Mf)''' = M)^ (modp). 

Therefore, the sets X{k,h,p) are subsets of X{k,p). Moreover, these 
sets are disjoint since for x e X{k, h,p) we have (x, k) = h/k. Applying 
(15.21) we complete the proof. □ 

We use the following estimate for T{d,p), see [5^, Bound (39)] with 
1/ = 3. 

Lemma 23. We have 

T{d,p) < (d-'/^p + ip/dy/') ip/dy^'\ 

Following [5j we denote 

logp 



D = p exp —4 

V log log 

(we always assume that p is large enough). Then we have 

(5.3) Yl dT{d,p)=p + o{p), 

d\p-i, 

d<D 

as p — )■ oo, see Section 5]. It is convenient for us to take a sum over 
k. The identity (15. ip can be rewritten as 

(5.4) f(p) = (p-l)5^I((Pzi)ZM. 

k\p-l 

We now define the sums 

Q(K^r\ T{{p-l)/k,p) 
Sp{K,L)= 2^ . 

k\p-l, 
K>k>L 
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and denote 

Ki = exp 4- — 

V log log p 

K2 = exp (logp)°-^) , 
Ks = exp ( (log log p)'^) 

So we see from (15 ■4p that 

F{p) = {p-l){Spip-l,K,)+S,iK^,K,) 
^ ■ ^ +Sp{K2,K,) + Sp{K,,0)). 

Inequality (I5.3P immediately implies 
(5.6) Spip-1,K,) = 1 + 0(1), 

as p —7- 00. So, to prove Theorem [TT] we have to estimate the sums 
Sp{K,,K2), Sp{K2,Ks) and Sp{Ks,0). 

Our main tools are Theorem [2] and estimates for sets of smooth 
numbers. Besides, for the sum SplK^, 0) we use some arguments which 
stem from functional analysis. 



5.2. Preliminary estimates. We recall the definitions (11.11) and (11.21) 
of the functions ro(fc) and so{k,t). By Lemma [22l Theorem [2] in this 
case can be rewritten as follows: 

Corollary 24. We have 

Y,n{p-i)/h,p) < ihx{k,p) < ^>{k,p,) 

h\k 

where s = So{k, k). 

By the prime number theorem we have 

(5.7) T^=^ + o(t^)- 

log Pj VogjJ 

It is easy to estimate the number of small divisors of a positive integer 
in terms of the \E'(x,?/) function. Moreover, we need to estimate the 
number of products of a small divisor of a fixed number by a small 
smooth number. For m G N, m > 2, ?/ > 0, and z > by T{m,y,z) 
we denote the number of numbers dl < z where is a divisor of m 
and / is an y-smooth number. Several estimates on r(m, 1, z) have 
recently been given in [12]. In particular our next estimate for y = 1 
is essentially [121 Bound (7)]. 
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Lemma 25. We have T{m, y, z) < ^{z, q) where q is the largest prime 
number with 

Yl i<m. 

y<e<g 
t prime 

Proof. Let D be the set of divisors d oi m such that all prime divisors 
of d are greater than y. Thus, we have to estimate the number of 
numbers dl < z where d E D and / is an y-smooth number. Let 
qi < q2 < • • • < qj he the prime divisors of m that are greater than y, 
and let pi < p2 < ■ ■ ■ be the primes greater than y. We associate with 
any number dl where I is y-smooth, d & D and 



=1 



the number 



J 

iHp;^ <di, 

which is clearly g-smooth. Since this map is injection, the result now 
follows. □ 

Corollary 26. We have T{m,l,z) < ^{z,q) where q is the largest 
prime number with 

Yl £<m. 
e<q 

I prime 

5.3. Some tools from functional analysis. Finally, we also need the 
following statement which is essentially based on linear algebra. Let X 
be a linear space of real sequences x = (xg)ggp, finitely supported on 
the set of primes V . 
Define 

Also for a set Q C P we use ttq to denote the coordinate restriction 
on the sequences of X , that is for x = {xq)qQ-p G A' we have 

We have the following: 

Lemma 27. Let T C X be a finite whose elements have integer coor- 
dinates. Let a positive integers s, L, M be such that L > M; 

(i) all elements of T generate a linear subspace {F) of X of di- 
mension dim(J^) < s; 
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(ii) ni^) <L for^eJ^; 

(iii) for any subset Q (^V with 

(5.8) ^logg<M 

the sequences tiv\q is one-to-one on T . 

Then 

< [cLjMY 

for some absolute constant c. 

Proof. We take a sufficiently large prime go and let Xq be (a finitely 
dimensional) space of all real sequences x = {xq)q^-pg where Vq = {q & 
'P,(l ^ Qo}- We require that go is so large that all elements of J-" are 
supported on Vq. Thus, we can consider as a subset of Xq. Reduction 
the lemma to a finite dimensional subspace is caused by the using of 
the Hahn-Banach separation theorem which has a simpler form in the 
finite dimensional case. 
Denote 

03 = C Pq : < s, TTg is one-to-one on J^} 

We see from the condition (i) that 03 7^ 0. Moreover if Q C P satis- 
fies (15^ then there exists i3 G 03 with S n Q = 0. Indeed, by (iii), 
7iv\Q is one-to-one map from to ^ = 7r-p\g(J^). Since by (i) the hn- 
ear subspace {G) = t^v\q{{J^)) of is of dimension at most s, there is 
B CVXQ with < s and such that ttq is one-to-one on (Q). Hence 
TTg is one-to-one on Q and J-". 

Let conv 03 be the convex hull in Xq of characteristic functions of all 
possible sets treated as elements of i3 G 03. 

We claim that there exists an element (3 = {/3q)q^p G conv SB such 
that 

(5.9) o</3,<2^1ogg, qeV. 

Indeed, assume that it is false. Define another convex subset of Xq: 

A = {{Xq)g^'p,q<qo ■ Xq < 2— logg}. 

By our assumption, the convex sets A and conv 03 are disjoint; also, A 
is an open set. Therefore, we can apply the Hahn-Banach separation 
theorem, see [T9j, and conclude the existence of a nonzero sequence 
(/ig)gg-p such that 

S = sup flqXq 
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satisfies 

sup j^/igo;, < inf 

and in particular is finite. Furthermore, since S is finite we also see 
that fJ^q > for all q. Hence 

Now we define a nonnegative sequence 
Then we have 

(5.10) E^^log^^^ 



2s 



and 



(5.11) minVA„>l. 
We now take 



gGB 



for which by fl5.10p we have (15.81) . Thus there exists B E ^ with 
i5 n Q = 0. We have 



gee 

contradicting (15. lip . This proves the existence of (3 = {(3q)q^-p G conv!B 
satisfying (15. 9p . 

It follows from the condition (ii) and the inequality (15. 9 p that 
Therefore 



Since /3 G conv!B, by the convexity there is S G 55 with 

sL 



EEw<4#^- 



xeT q&B 
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Hence there is a set J^q ^ such that 
(5.12) #J-o > 

and for every x G J-'q we have 

ASL 



(5.13) El^^l^ 



M 



Since i3 G 03, the map vrg is one-to-one on J-q. Moreover, G Z for 
X G J-". Therefore, from f l5.12p and fl5.13p we derive 



#^ < 2#J-o = 27rs(J-o) < 2 



74sL/M] + 
s 

and the result follows. □ 



5.4. Estimating S'p(i^i,i^2)- 
Lemma 28. We have 

Sp{K,,K2) = o{l), 

as p —> oo 

Proof. By Lemma [23| we have 

THp-l)/k,p) 



k\p—l, 

(5.14) ^^<'=^^^ 



k\p—l, k\p—l, 
K2<k<Ki K2<k<Ki 



-2/3+o(l) 



The first sum can be estimated trivially: 

k\p-l, K2<k<Ki 
K2<k<Ki 

< iri^/3)+°(l)p-l/3 = 0(1). 

Next, 



J2 A;-2/3+o(i)« 

fc|p— 1, A;|p— 1, 

K2<k<Ki K2<k<Ki 



65 



K2<k<Ki 
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By partial summation, 

^ ^_2/3+o(l) 

(5.16) K%<k, 

K2<k<Ki 

Define q as the largest prime q so that 

(5.17) Yl ^<P-1. 

e<q 

t prime 

By (15. 7p we have 

(5.18) g = logp + o(logp). 

Therefore, q < (log A;)^'^ for k > K2. Using Lemma [26] and Corollary [T3] 
we get 

r(p- 1,A;) < A;°-^2 (^k > K2). 
Plugging in this estimate to f l5.16p we conclude that 

(5.19) k-^^'-""^'^ =o{l). 

k\p-l, 
K2<k<Ki 

Now the resuh follows from fl5J5D and flHTTOD . □ 

5.5. Estimating Sp{K2,K^). 
Lemma 29. We have 

Sp{K2,Ks) = o{l), 

as p —> 00 

Proof. For any integer K G {K^, K2] we estimate 

(5.20) siK)= y: ^^^^'i^'^^^y 

k\p-l, 
K/e<k<K 

By Corollaries [M] and [26|, we have 

(5.21) S{K) < 2^{K,Ps)^{K,q)/K. 

where r = tq^K), s = so{K,K) and the prime q is defined by fl5.17p . 
To estimate s we use a simple inequality 

(5.22) (''^')>{r/sr. 
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For K < K2 we have r ^ (logp)°'^. Take sq = [(logp)*^'^] . Then we 
have, by fl^j^ . 



(r/s) 



s+o(s) 



r + So 
So 

Consequently, s < so = o{r) and 

(5.23) + = (r/.)^+«W and ('^^|^) 

Since r / sq < tq/ s < r we have 

log(r/s) X logr x log ( (log p)/ log i^), 
and thus we get the order for s 

log if 

s ^ 

iog((iogp)/iog/s:) 

Thus, for K < K2 we have 

log(r/s) = logr — logs = (1 + o(l)) (loglogp — 2 log log i^') . 

Hence, from (15.231) and the inequalities 

r + s\ ^ /r + s + 1 

] < K < { 
s J ~ \ s+l 

we obtain an asymptotic formula for s: 

(5.24) s = -- ^"^iy , (1 + 0(1)) + 0(1) as K < K2. 

log log p — 2 log log K 

(Note the term 0(1) is included to have a uniform estimate for 2 < 
K < K2, rather than only in the range K3 < K < K2). 

Using that log(l + a) < a for any a > 0, and that s ^ 00 for 
K > K^, we now conclude from Lemma [T2] that 

\og^ {K,p,) < (1 + o(l))-^ (1 + log (1 + 



logp^ V VP, 
Next, by (Km . 

logK logK 

< < (1 + oil)) logloglogp 

Ps S 

thus, by the prime number theorem. 
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Using (15.24P again, we deduce 

log^a {K,p,) < (1 + 0(1))— ^"^jy -logloglogp 

loglogp- 21oglogi^ 

^^■^^^ 5\ogK 

< + — i logloglogp. 

log log p 

Using Lemma [16] and (I5.18P we get 

log ^{K, q) < log - (1 + o(l))-^^f^ log ^ 



log log p log log p 
Thus, for K > K3 we have the inequality 

(5.26) \og^{K,q) < log/C - (1 + o(l)) f ^"^^ logloglogp. 

log logp 

Combining (15.251) and (15.261) gives 

log'${K,Ps) + log<i/{K,q) <logK - (1 + 0(1))-^ logloglogp 

log log p 

< logK - (1 + 0(1)) /"^,^^ log log log p 

log log p 

< logK — (1 + o(l))(loglogp)^ logloglogp. 

Therefore, by (15.211) . S{K) <^ (logp)~^. Observing that the sum 
Sp{K2,K2) does not exceed the sum of O(logp) of sums Sp{K) with 
< K < K2, we complete the proof. □ 

5.6. Estimating S'p(i^"3, 0). 
Lemma 30. We have 

5^(7^3,0) = 0(1). 

Proof. Since X{k,p) = for < p/2 we can always assume that k is 
large enough. 

For K < we estimate the following sums similar to ones given 
by lE2a: 

(5.27) S(A-)= 

K/V<k<K 

where 

(5.28) V = {\ogpf°\ 
As before, we put s = So{K, K). 



26 



J. BOURGAIN, S. V. KONYAGIN, AND I. E. SHPARLINSKI 



By f l5.24p . we have logs < log log — 1. Also, logr > log log p 
log log /T — 2. Therefore, 



log if 

s < 



(5.29) 



log log p — 2 log log K 



where 

(5.30) u 



logK 



log log p 

Identify an integer x given by its prime number factorisation 

with the sequence ((jq)qgp. Then the set X{k,p) becomes a subset 
J-" of A* of Section 15.31 As can be seen from the proof of Theorem [1] 
(see (12. ip ) it satisfies the condition (i) of Lemma 1271 Clearly, it also 
satisfies the condition (ii) of Lemma [27] with L = log K. 

We now fix some M with 1 < M < log K (to be chosen later) . Let Kg 
be the set of "good" k < K for which the condition (iii) of Lemma [271 
also holds for X{k,p). 

Then the bound of Lemma [27] yields that for k & Kg we have 

(5.31) #X(fc,p) < (^J^ 

for some absolute constant c > 0. 

Let Kb be the set of the remaining "bad" k < K for which the 
condition (iii) of Lemma [27] fails. 

Now we define a list (a multiset) C of integers m G {K/V^K]. For 
any k G {K/V, K] and for any / < K/k we write kl as many as T((p — 
l)/k,p) times. Thus, we have 



#£= Yl T{{p-l)/k,p) 



k\p-l, 
K/V<k<K 



K 



Hence, 



(5.32) V ^((^-l)A-^) <2;r-^#£. 

k 

k\p-l, 
K/V<k<K 



ELEMENTS OF COSETS OF SMALL SUBGROUPS 27 

For any m < K the number of occurrences of m in £ is, by Lemma [221 
T{{p - l)/k,p) < #X {{p -l,m),p). 

k\{p-l,m), 
K/V<k<K 

We say that m is "good" if {p — l,m) is "good", and m is "bad" if 
{p — l,m) is "bad". We spht £ into the subhsts Cg and Cb formed by 
"good" and "bad" elements, respectively. 
We have 

k\p-l, 
K/V<k<K, 
kelCb 

Therefore, 

(5.33) #A < KJ:f,{K), 
where 

k\p-l, 
K/V<k<K 
k£lCt 

We now estimate T,f,{K). 

We assume that k G /Cf,. Then for some set Q C P satisfying (15.81) 
and distinct integers xi, X2 G X{k,p) for the rational number 7 = Xi/x2 
we have 

(5.34) l = l[q^\ a, gZ. 

Since Xi, X2 G [1, k] C [1, K], we have 

(5.35) ^ I cTg I logg < 2 logK 

Fix an arbitrary set Q satisfying (15. 8p and estimate the number N 
of rational numbers 7 satisfying (I5.34p and (I5.35p . 

For some real parameter r > we partition Q as Q = Qi U Q2 where 
Qi = Q n [1, e'^]. A crude estimate gives the bound 

< N1N2 
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where 

Ni = #<K),6s, : J2\a,\<2\ogK\; 

I qeQi ) 

Since, trivially, #Qi < e"^ and by flS.Sp we also have #Q2 < M/t, we 
derive 

M/t 



Taking r = 0.6 logM we obtain 

Ar< (logir)2*^/i°s^, 

provided that K is large enough. 

Clearly, there are at most e'^^ possible sets Q satsifying (15.81) . There- 
fore, we see that there is a finite set W C Q (independent of k < K) of 
cardinality 

#W<e*^(logif)2*^/'°sM 

such that if G /Cfe then there are two distinct integers xi, X2 G X{k,p) 
with Xi/x2 G U. 

Let r be the multiplicative order of Xi/x2 modulo p. Since p\ x\—X2 
and 1 < Xi, X2 < A; we derive p < k"^. Hence for k < K < K3 we have 

r > - — - > (logp) / . 
log k 

Let 71 be the subset of all multiplicative orders modulo p that are 
greater than (logp)^*^^ of all rational number 7 G W. Clearly 

(5.36) #7^ < #W < e*'(logi^)2^/'°s^'. 

From the definition of X{k,p) we see that x^ = X2 (mod p). So if r 
is the multiplicative order of Xi/x2 then r | k. 

Thus if G /Cf, then k = (mod r) for some r E TZ. Thus, the 
contribution J]h{K) to S{K) from "bad" k is 

k\p-l, ren k\p-l, 

K/V<k<K K/V<k<K 
kGfCi, r\k 
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Applying Corollary [21] and then Corollary |26l we derive 



r\p—l 

77 2^ ^(K/r,g) 



K 

rlp—l 

(5.37) 

< 

K 

ren 

r\p—l 

where, as before, the prime q is defined by (15.171) . 

As we have noticed, only the values of k with > p/2 are of interest. 
So we can always assume that 

2 log log p 

In particular for the parameter u given by (I5.30p we have u ^ 1. 
We also see from (I5.29P that 

<u(l-,0^ ' 



So, to estimate \l/(i^', p^) we use Lemma [T2| where we see that the 
corresponding values of Z satisfies the inequality 

logps V \ Ps 

We also note that 

logK ^ logi^' log log p ^ log log p 



Ps ulog(u+l) log(M + 1) logloglogp 

Therefore 

Z < 1 + log + o(l, 

logp^ V Ps 



log(M + 1) / / \ u \og{u + 1) 

fi( 1 + 01 ^^)ViogJ2fJ2iP +0(1) 



log(M + 1) J J \ \og{u + 1 

We now see from Lemma [12] that 



log HK.P.) < (l + O (j^^) ) (log +0(1) 

from which we derive 

fKQQ\ 1 ,T,^I^ \^-(^ loglogp /logloglogp 

(5.38) Xog-^ [K, Ps) <u [log - — — — — + 0' 



log(M + 1) \ log(M + 1) 
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To estimate '^{K/r, q) for r > rg where Tq = (log pY^"^ we write 
^{K/r,q) < ^{K/ro,q). 

Then, using flS.lSp . for 

\og{K/ro) 
u = — j , 

we obtain 

M = M- 1/2 + 0(1). 
Now Lemma [T71 yields the estimate 

(5.39) ^(ir/r, q) < ^(fC/ro, q) < —p{u - 1/2 + o(l)) < — m"". 
Substituting fl5.38p and (15.391) in (15.371) . we derive 

Sf,(ir)<^exp(0 



where 



. loglogp , ^^ , ^ /^logloglogp 

i = M log — — - log(M +1) + ' 



\og{u + 1) V ^og{u + 1) 

loglogp /logloglogp 
u log — — — + O 



Mlog(M+l) \ log(u + 1) 

Considering the cases u < (log log p)^/^ and u > (log log p)^/^ sepa- 
rately, we see that 

_log log logp 



u- 



O {{loglog pY + u) . 



\og{u + 1) 
Thus 

^K) < y#7^(logp)-l/2+''(l) 

(5-40) / / loglogp ^ ^ 

exp u log — — Tz -T- + C 



'Ulog('U + 1) 

for some absolute constant C > 1. Considering the cases u < Ui, 
Ui < u < U2 and u > U2 separately, where 

loglogp 2C loglogp 

Ui = y. — - — and U2 = e 



(log log log p) 2 log log log p' 

we see that 

~ A log log p \ log log p log log log log p 

u log— — — — + C < — - — = o(loglogp). 

\ UiOg(M+l) J lOgiOglOgp 
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So inserting this bound in (15 .40^ and recalling fl5.28p and f l5.36p we 
arrive to the estimate 

^b{K) < e^^(logir)2^^/i°s^^(logp)-°-"9+°(i) 

Taking 

(5.41) M = 10-2 log logp 
and recallinq (I5.33I) we finally derive 

(5.42) #£, < K{\ogp)~^/\ 

To estimate i^Cg we observe that for any "good" m the number of 
occurencies of m in £ is estimated by the bound (I5.3ip which with M 
given by (I5.4ip becomes 

i^X{{p~l,m),p)<icour 

where Cq = 100c. 

The multiset C contains only elements from the set 

S. = {dl<K : d\p-l, 1<V}. 

Hence, 

(5.43) #£3 < (com)^#£. 
We can estimate by Lemma [25] as 

(5.44) #£< vl/(fr,g*), 
where q* is the largest prime number with 



v<e<g* 

£ prime 

By the prime number theorem, 

£<q* 
£ prime 

Using the pirme number theorem again and (15.280 we get 
g* < (1 + 0(1)) log (pe^(^)) = (1 + 0(1)) logp. 
By Lemma [T7I we have 
'^{K,q*) < Kp{w) 

= Kexp {-w{\og{w + 1) + loglog(w + 2) + 0(1))) 

where 

w = u= ^^^ll^ = un + o(l/loglogp)) = u(l + o(u~^/^)). 
log q* 
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Therefore, 

-^{K, q*) < Kp{w) = K exp {-u{\og{u + 1) + log log(M + 2) + 0(1))) . 
Combining this inequahty with f l5.43p and f l5.44p we get 

(5.45) #£3 < iTexp (^]^u\og\og{u + 2)^ . 

We now see from fl02D . flO^ . and f 05]) that 

E ^^^^'^^^^^'^^ « (logp)-^/^ + exp (-^nloglog(^ + 2)) . 

Taking the sum over K = (logp)'^/^°°, 100 < v < lOO(loglogp)^ with 
u = Z//100 and for K = with u = (log log p)^ we conclude the 
proof. □ 

5.7. Proof of Theorem llll Theorem [TT] follows immediately from 
the equation (15.51) , the asymptotic formula (15.61) and Lemmas [28| 
and 



5.8. Lower bound. To prove (11.141) we recall that for any d \ p — 1 

we have 

where (f{k) is the Euler function, see [161 Proposition 4.3(a)]. Thus for 
any D, we derive from (15. ip that 

(5.46) F(p) > J2 dnd,p) =Y,V (^) + O . 

d\p-l d|p-l ^ 

d<D d<D 

Using the trivial bound ip{k) < k we now obtain 

(5.47) 5:,(f^).5:,(f^)+o(p.-.i)-). 

d\p-l ^ ^ d\p-\ ^ ^ 

d<D 

Also, it is known that 

(5.48) E^(^)=P-1- 

d\p-i ^ ^ 

Taking D = p^/\ we see that flOHl) . (Km and flOSl) imply f lTTil) . 
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5.9. Estimates for almost all primes. Take an arbitrary increasing 
function g : ]R_|_ — )► such that g{u) — ?■ oo as n — t- oo. It is easy to 
see from the proof of Lemma [30] that 

S{K^,K^) = o{l) 

where 

Combining this with Lemmas [2H] and [221 we get 

k\p-l, 

k>K4 

Therefore, taking 

^4 = (logx)^(")/=^ 

for a sufficiently large x, by the arguments from [U Section 5] we con- 
clude that the conjecture f ll.l2p of J. Holden and P. Moree [16] holds 
for all but at most 

Eix)<j2Yl E 1 « ^4 = (log x)^(-) 

k<K4 ^'^^ p\k'=-{-j)'' 

primes p < x, which substantially improves the bound 

E{x) « exp (l2-^^^) . 

\ log log X J 

from [5] Section 5]. 
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